Protect server key

Region server keys must be stored only in server-side environment variables or a secrets manager. Never expose them in clients, public repositories, ordinary logs, URLs, or support-ticket screenshots. Restrict read access and configure an IP allowlist when appropriate for your deployment.

For key scope, rotation, transition periods, and incident response, see Server Integration and Keys.